Job Summary

Leading the development, implementation, and continuous improvement of the organization's governance, risk management, and compliance (GRC) framework by establishing effective governance practices, identifying and managing organizational risks, ensuring compliance with applicable laws, regulations, donor requirements, and internal policies, and promoting a culture of accountability, transparency, and risk-informed decision-making to safeguard the organization's assets, reputation, and strategic objectives.

Tasks and Responsibilities
1. Governance, Risk Management, and Compliance Framework

• Lead the development, implementation, and periodic review of the organization's Governance, Risk, and Compliance (GRC) framework.

• Develop and maintain the organization's Governance Framework, Risk Management Policy, Risk Appetite Framework, Compliance Framework, and related procedures.

• Ensure governance practices are aligned with the organization's strategic objectives, legal obligations, donor requirements, and international best practices.

• Oversee the establishment, maintenance, and periodic review of the organization's Enterprise Risk Register.

2. Risk Assessment, Analysis, and Mitigation

• Lead the identification, assessment, analysis, and evaluation of strategic, operational, financial, compliance, programmatic, reputational, and security risks across the organization.

• Review and approve risk assessments conducted by departments and ensure consistency in risk evaluation methodologies.

• Oversee the development, implementation, and monitoring of risk mitigation and treatment plans in coordination with relevant departments.

• Monitor the organization's Risk Appetite and Key Risk Indicators (KRIs) and recommend corrective actions when acceptable thresholds are exceeded.

3. Compliance, Internal Control, and Reporting

• Ensure organizational compliance with applicable laws, regulations, donor requirements, contractual obligations, and internal policies.

• Lead compliance monitoring activities and oversee the implementation of corrective and preventive actions resulting from compliance reviews, audits, and assessments.

• Evaluate the effectiveness of internal controls and recommend improvements to strengthen governance and organizational accountability.

• Prepare and present periodic governance, risk, and compliance reports to executive management and relevant governance committees.

4. Advisory, Coordination, and Capacity Building

• Advise executive management and department heads on governance, risk management, compliance, and internal control matters.

• Promote the integration of risk management and governance principles into organizational planning, project implementation, and operational decision-making.

• Develop and deliver awareness sessions, guidance materials, and capacity-building initiatives to strengthen governance, compliance, and risk management practices.

• Monitor emerging risks, legislative developments, donor requirements, and external trends that may affect the organization's operations and recommend appropriate strategic responses.